Secure, monitor, and optimize data storage and data processing →mediumMultiple SelectObjective-mapped
DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing
You are a data engineer for a company that uses Azure Synapse Analytics dedicated SQL pool. You need to implement security best practices to protect sensitive data. Which TWO actions should you take? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable Transparent Data Encryption (TDE) on the dedicated SQL pool.
Options C and E are correct. C: Transparent Data Encryption (TDE) encrypts data at rest in the dedicated SQL pool, protecting against unauthorized access to the physical storage. E: Column-level security restricts access to sensitive columns based on user roles or identities, ensuring that only authorized users can view or modify sensitive data. A is incorrect because firewall rules control network access, not data protection within the database. B is incorrect because Azure Storage encryption is enabled by default for all storage accounts and is not a security measure specific to Synapse SQL pool. D is incorrect because Dynamic Data Masking obfuscates data from all users, but it does not prevent access; users can still see the original data if they have permissions, unlike column-level security which can block access entirely.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a firewall rule to allow only specific IP addresses.
Why it's wrong here
Incorrect: Firewall controls network access, not data protection within the database.
- ✗
Enable Azure Storage encryption for the underlying storage.
Why it's wrong here
Incorrect: Dedicated SQL pool data is stored in SQL Server files, not directly in Azure Storage; TDE covers that.
- ✓
Enable Transparent Data Encryption (TDE) on the dedicated SQL pool.
Why this is correct
Correct: TDE encrypts the database at rest, protecting data files from unauthorized access.
- ✗
Use Dynamic Data Masking to obfuscate sensitive data from all users.
Why it's wrong here
Incorrect: DDM masks data but does not prevent users with higher privileges from seeing unmasked data.
- ✓
Implement column-level security to restrict access to sensitive columns.
Why this is correct
Correct: Column-level security (CLS) restricts column access to specific users or roles.
Visual reference
Go deeper
Related to this question
Learn chapter
Introduction to Azure Data Engineering
Key term
Dynamic Data Masking
Dynamic Data Masking is a security feature that automatically hides sensitive data in query results so that unauthorized users see only masked information, while authorized users see the real data.
Key term
Azure Synapse Analytics
Azure Synapse Analytics is a cloud-based data integration, warehousing, and analytics service that brings together big data and data warehouse capabilities under one platform.
About these practice questions
One of 760 original DP-203 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.